Re: SQL Injection Prevention

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Shabam (blislecp_at_hotmail.com)
Date: 09/28/04 

Date: Tue, 28 Sep 2004 00:56:18 -0700

> Why not use stored procedures?

Stored procedures are currently being used, but still, that's no guarantee
that sql injections can't take place right? Are you saying with stored
procedures, all user input sent to a stored procedure will not cause sql
injection?

Relevant Pages

  • Re: SQL Injection Prevention
    ... Stored procedures are currently being used, but still, that's no guarantee ... that sql injections can't take place right? ... Are you saying with stored ...
    (microsoft.public.dotnet.security)
  • Re: sample validation code for sql injection attact
    ... If your code is safe from SQL injections, an attempt to do one shouldn't result in an error message, as it doesn't cause any error. ... The easiest way to prevent SQL injections is to use parameterized queries. ... Additional security can be achieved by only using stored procedures in the queries, and limit the database user to only have permission to run stored procedures. ... can anybody gives me a sample code where the sql injection attack is validated. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: SQL Injection Prevention
    ... more like apologizing from me to the stored procedures camp and attempt to ... I'm not bashing stored procedures, ... I'm just saying that when it concerns to SQL injection, ... >>that doesn't mean anything about good programming practices what so ever. ...
    (microsoft.public.sqlserver.server)
  • Re: SQL Injection Prevention
    ... more like apologizing from me to the stored procedures camp and attempt to ... I'm not bashing stored procedures, ... I'm just saying that when it concerns to SQL injection, ... >>that doesn't mean anything about good programming practices what so ever. ...
    (microsoft.public.dotnet.security)
  • Re: ADO vs Advantage
    ... > Same concept with stored procedures as well... ... Are you saying this code ... Thanks, Craig. ... Prev by Date: ...
    (borland.public.delphi.database.ado)